Skip to content

Known vulnerabilities in Mozilla Thunderbird

Is your version affected?

CVE Summary Score Published
CVE-2026-92046 Use-after-free in the Graphics component 8.8 High Sep 15, 2026
CVE-2026-92045 Sandbox escape due to incorrect boundary conditions in the WebRTC component 9.6 Critical Sep 15, 2026
CVE-2026-92044 Information disclosure in the Networking: HTTP component 7.5 High Sep 15, 2026
CVE-2026-92043 Privilege escalation due to incorrect boundary conditions in the Audio/Video component 8.8 High Sep 15, 2026
CVE-2026-92042 Race condition in the DOM: Content Processes component 7.5 High Sep 15, 2026
CVE-2026-92041 Mitigation bypass in the DOM: Networking component 9.1 Critical Sep 15, 2026
CVE-2026-92040 Use-after-free in the JavaScript: WebAssembly component 8.8 High Sep 15, 2026
CVE-2026-92039 Mitigation bypass in the DOM: Notifications component 6.3 Medium Sep 15, 2026
CVE-2026-92038 Mitigation bypass in the Remote Settings Client component 9.1 Critical Sep 15, 2026
CVE-2026-92037 Incorrect boundary conditions in the DOM: Animation component 9.8 Critical Sep 15, 2026
CVE-2026-92036 Incorrect boundary conditions in the Networking: HTTP component 9.8 Critical Sep 15, 2026
CVE-2026-92035 Sandbox escape due to incorrect boundary conditions in the Graphics component 9.6 Critical Sep 15, 2026
CVE-2026-92034 Site isolation issue in the Graphics component 9.1 Critical Sep 15, 2026
CVE-2026-92032 Sandbox escape due to invalid pointer in the Graphics component 9.6 Critical Sep 15, 2026
CVE-2026-92031 Information disclosure in the Graphics: ImageLib component 6.5 Medium Sep 15, 2026
CVE-2026-92030 Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component 5.4 Medium Sep 15, 2026
CVE-2026-92029 Use-after-free in the SVG component 8.8 High Sep 15, 2026
CVE-2026-92028 Use-after-free in the DOM: Core & HTML component 8.8 High Sep 15, 2026
CVE-2026-92027 Use-after-free in the DOM: Streams component 8.8 High Sep 15, 2026
CVE-2026-92026 Use-after-free in the Networking component 8.8 High Sep 15, 2026
CVE-2026-92025 Use-after-free in the DOM: Navigation component 8.8 High Sep 15, 2026
CVE-2026-92024 Use-after-free in the SVG component 8.8 High Sep 15, 2026
CVE-2026-92023 Use-after-free in the XML component 8.8 High Sep 15, 2026
CVE-2026-92022 Use-after-free in the DOM: HTML Parser component 8.8 High Sep 15, 2026
CVE-2026-92021 Use-after-free in the JavaScript Engine: JIT component 8.8 High Sep 15, 2026

Other Mozilla products